Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 503
Alerts This Week
Warning Icon 1 503

Ubuntu 22.04 LTS USN-5663-1 Critical: Thunderbird Multiple Issues

ubuntu
Calendar Grey October 7, 2022
Dist Ubuntu Esm H88
A notice regarding vulnerabilities in Thunderbird has been issued in Ubuntu Security Notice USN-5663-1, impacting several long-term support (LTS) versions of Ubuntu.
Several security issues were fixed in Thunderbird.

Summary

Several security issues were fixed in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

Multiple security issues were discovered in Thunderbird. If a user were

tricked into opening a specially crafted website in a browsing context, an

attacker could potentially exploit these to cause a denial of service,

spoof the mouse pointer position, obtain sensitive information, spoof the

contents of the addressbar, bypass security restrictions, or execute

arbitrary code. (CVE-2022-2505, CVE-2022-36318, CVE-2022-36319,

CVE-2022-38472, CVE-2022-38473, CVE-2022-38476 CVE-2022-38477,

CVE-2022-38478)

Multiple security issues were discovered in Thunderbird. An attacker could

potentially exploit these in order to determine when a user opens a

specially crafted message. (CVE-2022-3032, CVE-2022-3034)

It was discovered that Thunderbird did not correctly handle HTML messages

that contain a meta tag in some circumstances....

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service information leak exploit Ubuntu thunderbird multiple threats

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  thunderbird                     1:102.2.2+build1-0ubuntu0.22.04.1

Ubuntu 20.04 LTS:
  thunderbird                     1:102.2.2+build1-0ubuntu0.20.04.1

Ubuntu 18.04 LTS:
  thunderbird                     1:102.2.2+build1-0ubuntu0.18.04.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5663-1

CVE-2022-2505, CVE-2022-3032, CVE-2022-3033, CVE-2022-3034,

CVE-2022-36059, CVE-2022-36318, CVE-2022-36319, CVE-2022-38472,

CVE-2022-38473, CVE-2022-38476, CVE-2022-38477, CVE-2022-38478

Severity
critical
Lowest
Low
Medium
High
Critical

October 07, 2022

Topics%20covered

Topics Covered

security advisory denial of service information leak exploit Ubuntu thunderbird multiple threats

Package Information

https://launchpad.net/ubuntu/+source/thunderbird/1:102.2.2+build1-0ubuntu0.22.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.